commit 7b92e7134c6f8edd3ba7069778ce2b7b09c789a0
Author: Pete Travis <immanetize(a)fedoraproject.org>
Date: Thu May 9 00:29:06 2013 -0600
Added ModemManager and firewalld lockdown to Networking beat
en-US/Networking.xml | 47 ++++++++++++++++++++++++++++++++++++++++++++++-
1 files changed, 46 insertions(+), 1 deletions(-)
---
diff --git a/en-US/Networking.xml b/en-US/Networking.xml
index 91283c7..61743d0 100644
--- a/en-US/Networking.xml
+++ b/en-US/Networking.xml
@@ -5,6 +5,51 @@
<section>
<title>Networking</title>
- <para />
+
+ <section>
+ <title>Improved Mobile Broadband support</title>
+ <para>
+ Fedora &PRODVER; includes a new, more capable version of
<application>ModemManager</application> for interacting with mobile broadband
devices. This version provides better support for multi-mode devices like
<productname>Qualcomm Gobi</productname> WWAN cards and and other devices that
support the <literal>CDMA/EVDO/LTE</literal> standards, the
<literal>GSM/UMTS/LTE</literal> standards, or devices that can support either.
To provide this support, the <application>D-Bus</application> API of
<application>ModemManager</application> has changed, which may require updates
in applications that interact with <application>ModemManager</application> to
control WWAN devices.
+ </para>
+ <para>
+ Many devices will connect and authenticate using the
<application>NetworkManager</application> GUI.
<command>nm-cli</command> has added features to configure mobile connections.
For more detailed usage information, consult <ulink
url='http://fedoraproject.org/wiki/Features/MoreMobileBroadband' /> .
+ </para>
+ </section>
+
+ <section>
+ <title>firewalld improvements</title>
+ <para>
+ <application>firewalld</application>, introduced as the default
firewall solution for Fedora &PREVVER;, adds new features to allow easy configuration
of powerful firewalls.
+ </para>
+ <section>
+ <title>Locking the firewall and whitelisting changes</title>
+ <!-- Feature page lists as 80% complete as of 9MAY2013; leaving a limited usage
summary for now -->
+ <para>
+ Dynamic firewall configuration by applications can now be locked down completely,
or limited to a whitelist. The whitelist can contain commands, users, UIDs, and selinux
contexts.
+ </para>
+ <para>
+ To lock down the firewall, set <command>Lockdown=yes</command> in
<filename>/etc/firewalld/firewalld.conf</filename> and reload the firewall.
+ <screen>
+ <command>firewall-cmd --reload</command>
+ </screen>
+ The firewall should be reloaded for any changes to the whitelist to take effect.
+ </para>
+ <para>
+ The whitelist configuration is located in
<filename>/etc/firewalld/lockdown-whitelist.xml</filename> and is empty by
default. The whitelist below will allow only <command>firewall-cmd</command>
to make changes to the firewall. The <emphasis>'*'</emphasis>
character allows the rule to match arguments passed to
<command>firewall-cmd</command>
+ <screen>
+<![CDATA[
+<whitelist>
+ <command name="/usr/bin/python /bin/firewall-cmd*" />
+</whitelist>
+]]>
+ </screen>
+ </para>
+ <para>
+ For more information on <application>firewalld</application>
lockdown, consult the feature page at <ulink
url="http://fedoraproject.org/wiki/Features/FirewalldLockdown" />
+ </para>
+ </section>
+ </section>
+
+
</section>